Fraser Mclisky (Cbci) (Amicda) (Assoc Gcri) Email & Phone Number

Melbourne, Vic, Au

Melbourne, Victoria, Australia

Terra Firma is one of Australia's leading business and technology consulting companies providing clients with consulting services covering the entire lifecycle of a program –from strategy to the full spectrum of project services.I am part of the Business Continuity & Resilience (BC&R) Practice helping our clients be prepared to manage and recover from internal or external disruptions to their operations. We work with our clients in a range of short and ongoing full lifecycle engagements that include:• developing policy and frameworks, • facilitating workshops to determine critical business activities and the resources required to maintain those activities• developing Business Continuity Plans, Incident and Crisis Management Plans,• facilitating training and awareness, and• delivering exercises to validate plans and enhance people capabilities.

Melbourne, Victoria, Australia

Member of Group Business Continuity & Crisis Management team that provides first line support to IAG businesses, provides oversight, guidance and assurance and management of group BCM and CM policies and frameworks.Specific responsibilities: lead in e-2-e development cycle for IAG's BCM tool in 2020-21. Working with vendor to develop requirements, design and build BIA and BCP toolset that will comply with CPS232, 231 and 234 requirements and move IAG from its current manual processes and plans to singular repository.Crisis Management / Incident Management: development and facilitation of business-level, partner and executive level scenario exercises. Manage 232 compliance and assurance activities

Melbourne, Australia

Since leaving university in 1992 I have worked in many and varied roles including local councils, the University of Melbourne Department of Ophthalmology, PlesTel/Commander telecommunications, NAB, AXA, NAB again and lately MacKillop Family Services. I have also volunteered in some wonderful sporting and NFP organisations and my boy's primary school.I have spent the last 10 years delivering business related and risk related outcomes, engaging with people across the spectrum from CEOs to care workers, all with the intention of assisting them improve their businesses by providing forthright guidance, training and analysis and acting as the agent provocateur.I wanted to take a different direction and started my own business in mid 2016 called 'Koru Business Services' (in reference to my NZ background). The koru (Māori for "loop") is a spiral shape based on the shape of a new unfurling silver fern frond and symbolises new life, growth, strength and peace. I hope to bring all of those things into my future engagements along with the delivery of high product standards that exceed my client's expectations.I have been engaged primarily in the NFP and telecommunications spaces in roles including project management, IT implementations, risk analysis, tender writing, copyright and policy and procedure development and crisis scenario development.

Melbourne, Australia

I started my own business over a year ago. I had a desire to be more flexible in what I did and with whom I could work with and to capitalise on my experience and skills developed over the last 20 years in Education, Telecommunications, Banking & Insurance, local Government and the Not-For-Profit sector. Over the past year I have been engaged primarily in the NFP and telecommunications spaces in roles including project management, IT implementations, risk analysis, tender writing, copyright and policy and procedure development.

Melbourne, Australia

Crisis Shield was established in 2010 (originally named 'Briggs Communications') and has grown as a multifaceted agency helping organisations become Crisis Ready through a 5 Step Methodology. I have accepted a role with Allan and the Crisis Shield team as Senior Advisor.As a Senior Advisor, I’m part of the Crisis Shield team providing specialist advice, planning and training in crisis management, emergency management, crisis communications and media management.I bring to the team experience in writing and facilitating crisis exercises, business analysis, risk management and business continuity management.

Melbourne, Australia

Three-month contract with Crisis Shield www.crisisshield.com.au to design functional exercises (simulations) for 3 key clientsDeliverables: Develop in-depth functional (simulation) exercises for Crisis Management teams of two University clients in Victoria, AustraliaThe aim of the scenarios were to test internal processes, plans, communications and relationships within the core and wider crisis management structures.Exercises involved a diverse range of hardcopy, social media, sms, phone and scripted media injects over the 3 hours of crisis exercising with teams being challenged to manage a wider range of internal and external stakeholders and communicationsA major US University engaged Crisis Shield to develop and deliver a crisis exercise for 50 students and paying clients as part of a Masters course in Communications. Major deliverable: create a fictional company - history, company structure, values and personnel and products and then craft a scenario based on this organisation's key product failing with injuries and significant reputational damage. Crisis Shield facilitated the exercise in the US with staff managing social media and other injects from Australia. Students (in teams of 10) would assume the roles of the Crisis Communications team for this fictional company and have to manage the escalating crisis by delivering timely and effective communications to a broad range of stakeholders including staff, customers, partners, investors and regulators.

Melbourne, Australia

Three-month contract engagement with Crisis Shield (www.crisisshield.com.au) Primary responsibilities: to collaborate with clients, understand crisis vulnerabilities and then develop and co-facilitate, with the Crisis Shield team, interactive crisis exercises.• for personnel designated to conduct the organisation’s management and response for crisis or emergency situations that require multi-organisation coordination.• to cover crisis management concepts, context, organisations’ framework and arrangements with focus on bringing all sections/roles together and learning how the CMT operates as a team.2. – DELIVERED: • 1x Interactive tabletop exercise for a Victorian tertiary institution• 2x Highly interactive simulation exercises to actively rehearse the Critical Incident Management Team’s (CIMT) crisis response processes, support (infrastructure, facilities) and technology (equipment, systems), in accordance with their Critical Incident Management Plan (CIMP).o with multiple hardcopy, telephone, sms, email, social media and video injects over 3 hours• 1 x highly interactive simulation exercise for 50 senior executives for a US tertiary institution as part of their in-residence Masters of Communication course. The exercise involved participants to work together (in 5 teams of 10) as the Crisis Communications Team for a fictional company with a major product failure: Deliverables included:o creating a fictional company, including organisation structure, values, products, sales, partners/manufacturers, key stakeholders, crisis management framework and toolkito developing a scenario based on a significant product failure across a number of jurisdictions, o co-facilitating the 3-hour exercise in the US with the MD and 2 other colleagues from Crisis Shield (and using Australian-based staff to run the simulation injects into the US teams)

Melbourne, Australia

Short term engagements to MacKillop with success: 1 – Developed an independent risk assessment as part of due diligence for MacKillop’s proprietary client and carer management through extensive interviews with internal executive and IT stakeholders, and external partners to ensure an holistic view of internal and external risks was captured• Developed IT risk register including potential mitigation strategies (for executive endorsement)• Presented risk report to Information Management Committee• Drafted an accountability framework for MacKillop and for community services sector governance committee2 - Recommended Growth strategy• Drafted recommendations to be undertaken by MacKillop executive to ensure successful growth of proprietary IT system as a viable sector product • Developed alternative IT pricing models (purchase and licensing costs)3 – Brokered approval from UK copyright holders to allow MacKillop to utilize and embed Looking-After-Children (LAC) framework within proprietary IT system• Victorian Government department holds current copyright to LAC requiring all community service agencies to input statutory data manually into government database. • Copyright approval enables MacKillop to embed LAC questionnaire into enterprise IT system’s outcome framework module thereby reducing double data entry, reducing errors and saving significant caseworker time. MacKillop has ability to upload data into government systems and auto create reporting that was previously manually created.4 – Successful Department of Premier & Cabinet $400k tender submission • Successful Sector Innovation submission allows MacKillop IT developers to develop 5 additional modules & mobile apps onto MacKillop’s proprietary IT system. 5 - Business and IT readiness for DHHS's new (Oct 2017) Client Incident Management Framework (CIMS) 6 - Victorian Protective Data Security Framework• Created 20 ICT security policies as first stage in organisation readiness

Melbourne, Australia

o Oracle team member providing advice, guidance and implementation skills as part of enterprise wide Siebel re-platforming project / Siebel HI upgrade project lead. o Conducted re-evaluation of RCRM Availability risk assessment control environment (report compiled in Oct 2016 by Risk Operations) followed by evidentiary review of risk control environment post Go-live of Siebel re-platforming. - Value to the organisation of undertaking the audit of an earlier risk assessment for one of organisation’s 45 critical systems, is this review forms one lever in a wider organisational review / evaluation of current risk policy, framework, assurance and reporting processes.

Melbourne, Australia

3 month contract. Facilitated departmental risk workshops for each of Council's 22 business units. Drafted risk profiles for each business unit and gained departmental and Director approval of risks.Consolidated department risk profiles into Divisional risk profiles. Created Divisional and Organisational risk reportingSubmitted Department, Division and organisational risk profiles and reporting to Council ExecutiveAlso undertook ad hoc risk reviews for business units (i.e. special events, music festivals etc)

Melbourne, Australia

This was a new senior management role, established in recognition of the increasing sophistication required in the strategic management of risk and compliance for the organisation.Responsible for the development of policy, framework and tools and management and oversight of the organisation’s risk and compliance obligations, work health and safety, and to ensure compliance with the relevant ISO standards and MacKillop’s agreed processes for risk and complianceResponsibilities included:• Strategy – provide strategic insight and guidance to executive, drive risk related initiatives including bushfire risk management strategy to standardised approach across 3 states to ensure client safety in high-risk areas• Framework & Policy– re-designed and embedded the Risk and Compliance frameworks to align with Australian Standards. • IT system implementation – Business owner and project lead for development and implementation of organisational risk / incident notification & escalation system that reduced simplified the existing state & program based systems, improved accountability & reporting functionality and audit compliance requirements• Risk management – provide advice, guidance and challenge to existing processes, practices and systems to enable informed decision-making by management • Compliance & reporting – developed systematic method to capture and report on key compliance risks / issues• WHS – people leader of WHS Manager. WHS/HR/Risk engagement /oversight during WHS incidents. Post incident reviews. Engagement with Insurer. Policy /procedure development & review. Training and awareness. Co-Chair of WHS committee.• Oversight & Assurance – conducted post incident reviews following major incidents. Led project team on internal audits / evaluation of documentation for external auditors• Privacy – Chief Privacy Officer – Documented new privacy statement in line with Federal Privacy Principles. Oversighted privacy actions for new IT developments.

Melbourne, Australia

Group Business Continuity FrameworkImplemented an organisation-wide new Business Continuity Management Framework (including new Group BCM policy, standards, tools and templates) across NAB's 6 regional areas (NZ, AUS, UK, US, Wealth, Asia) over 18 months.• Change management – member of 4-person team that successfully developed and implemented NAB’s Group business continuity management framework across 7 different geographic/operating environments • Training – developed online and documentary training materials and conducted remote train-the-trainer sessions to regional BCM coordinators• Oversight – developed oversight and monitoring methodology and conducted regular oversight for 6-month period of 7 operational jurisdictions to ensure BCM framework was successfully implemented Incident Management• Incident Management – crafted applicable incident scenarios for state incident teams, facilitated incident scenario workshops to improve crisis leadership and coordination functions; re-designed incident team materials based on workshop outcomes

Melbourne, Australia

• Business Impact Analysis- Facilitated roll out of Business Impact Analysis (BIA) and BC planning program across the Australian BankIncident management coordination and state and region level • Coordination – Coordinated NAB’s state incident teams during 7 state based incidents (including bushfires, flooding, cyclones and major IT outage) over an 8-week period including management reporting, post incident reviews and recommendations for improvement

Melbourne, Australia

Single point - role for AXA's Business Continuity (BC) framework design and implementation.Responsibilities included: Redesign and implementation of business areas Business Continuity plans Development of third party Business Continuity /Disaster Recover (DR) strategy Delivery of AXA's third party operated recovery site to allow for early restoration and continuation of critical business functions• Crisis management – designed and implemented the annual senior management crisis exercise to improve operational intelligence in managing a significant event• Strategy – developed organisational business and IT recovery strategy precipitated by the contraction of multiple offices into a single head office. • Strategy implementation – key member in the design & delivery of AXA’s 200 seat, third party operated business/IT recovery site including identification of all critical business processes, staff and IT applications, led successful connectivity testing, user acceptance testing, scenario activation tests and staff relocation tests• Business Continuity – redesigned and implemented new BIA templates to improve usability by business teams and increase the amount and level of business specific and IT information to better inform decision-making

Melbourne, Australia

Facilitated workshops with key business stakeholders across Australian Region to produce critical BC plans for Business Bank, Retail Bank, Wealth and Custody businesses.• Business Continuity – implemented a standardised template to business leaders, simplification of earlier attempts to capture critical business processes to be used in event of major business or organisational incident• Oversight & monitoring – provided independent oversight and recommendations for improvement of business level IT and process tests to ensure compliance against standards

Melbourne, Australia

Managed PMO activity including audit (GAITS) reporting and weekly reporting to PCBReporting Policy developmentProject management office – managed operational risk reporting stream and governance of internal audit (GAITS) activity• Risk & Governance – developed policy guidelines for NAB Australian operations and reporting framework • Business Profiling – embedded with business operations teams, interviewed 40 senior executives and management staff to develop business profile documents (customers, competitors, financials, organisational structure etc.), for executive use and for operational risk teams to assist with risk profiling activities• IT User acceptance testing – led UAT program of work during implementation of NAB risk management system

Melbourne, Australia

Senior executive interviews to create 9 business profile documents for use by business teams and assist in risk profile development

Melbourne

Managed 12 AP/AR staffProject implementation of CRM toolPart of M&A team Project team to develop telephony / internet bundle offeringsOrganisation process mapping / systems process requirements gathering & analysisProcess re-engineeringSubject matter expert for organisation's billing systems Trainer (new starters and systems)• IT implementation – system and process requirements gathering for many IT projects, including whole of organisation ERM• IT User acceptance testing – led UAT program of work for billing systems development as part of ERM implementation• Training – process and systems trainer for all new starters, including development of training materials• Mergers & Acquisitions – part of Commander M&A team that conducted due diligence investigations prior to purchase of RSL COM and then engaged to billing SME during merger of company systems• Process re-engineering – undertook project specific roles to map ‘as-is’ and ‘to-be’ processes during de-coupling from Telstra billing system, data migration and design of organisation ERM

Certificate Iv In Compliance Management (91516Nsw), Compliance

Activities and Societies: Certificate IV in Compliance management intensive course

Certificate Business Continuity Management Principles And Good Practice, Business Continuity Management

Master'S Degree, Geography / Tourism